The file "msstuber.dll" will be loaded due to the changes in the Windows Registry of Internet Explorer. If the user logs on to the site "www.e-cold.com", the trojan is able to spy out the login password.